mezcalito/imgproxy-bundle

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Although the recent release provides some compensating evidence, the short-term absence of development activity lowers confidence in ongoing maintenance.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not severe enough to make the release unfit on its own.

Version stabilitycaution

Version 0.5.3 is not a prerelease, and no recent releases are prereleases, which supports adoption. It remains below a stable major version, so some API evolution risk remains.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or write-wide permissions, but all 6 action references are unpinned. That leaves avoidable workflow supply-chain exposure.